Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File: Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier: 9VHKtZpv10jr9KiKX+hA/g0f8k7bW35Bd94TR/XV4GE=
Subject key identifier: 8F:D3:A2:71:2A:A3:54:4C:60:D9:8A:34:B8:2E:C9:57:6A:D6:CD:89
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 019DCED044D25A632BE256691ACEC486DDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number: 12DB
Signing time: Mon 27 Apr 2026 12:00:48 +0000
Manifest this update: Mon 27 Apr 2026 12:00:48 +0000
Manifest next update: Tue 28 Apr 2026 12:00:48 +0000
Files and hashes: 1: 1m9vhqXwy7CGqJjqRjUuXJx7INY.roa (hash: qE04gkM/s7vX8p51u5m0unnrB0JoxCvsTSSShhmlhmI=)
2: G-RbIUzq1PlvE-q3SCybhunvJKI.roa (hash: opq2WoRARYg0RhIa4g9HMBvHxIPBPs39AMNusR3Lt3w=)
3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: ljV4A8IIgDcHc/MLQ6K5lHg44yhUP9ECLzc8mArTfr4=)
4: SSSB_UVGJCKdh7PPz0qaSyXW7lc.roa (hash: CRGt/HquFvCmfw30kehUPdqDR7YReCJJSXwsQnL4oU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:44:d2:5a:63:2b:e2:56:69:1a:ce:c4:86:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Apr 27 12:00:48 2026 GMT
Not After : Apr 28 12:00:48 2026 GMT
Subject: CN=8fd3a2712aa3544c60d98a34b82ec9576ad6cd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:01:df:70:66:1a:4f:20:10:62:14:d0:fe:
c9:b4:34:b9:c9:bf:96:62:61:08:7a:02:7f:26:0c:
38:80:48:c1:fd:2e:b7:42:91:9c:25:5e:21:24:2a:
94:7f:85:a0:7f:c7:af:a3:4d:e4:49:63:d6:80:b9:
b4:d3:76:33:58:53:d1:94:f5:46:fc:ef:f1:b2:de:
68:49:ea:0b:5a:54:4b:69:72:20:14:62:3e:0a:68:
bd:97:fd:c6:ed:28:4a:1b:2f:18:b4:b5:3d:47:df:
50:67:88:18:4f:0d:7e:b4:f3:e2:50:62:f7:b4:ea:
b0:ce:fe:3a:21:ce:5c:77:96:27:7b:9e:1b:ce:2d:
3c:8e:e8:f0:3a:9f:4b:4b:db:b7:d6:12:a4:33:1f:
be:fb:7b:9f:1d:46:a9:4e:1c:32:61:6b:34:d3:42:
1c:06:33:5e:ff:25:45:c7:48:83:47:67:c3:28:89:
8d:f5:9e:0b:08:55:9b:f6:79:a0:6f:9c:cf:8c:d0:
0c:29:eb:8f:29:c6:e7:ee:20:47:0b:00:09:62:61:
7e:6f:25:f7:52:07:be:91:ba:0c:87:b8:69:6f:a0:
58:a3:5f:89:da:be:88:a9:0d:46:7f:4c:bd:c7:e4:
54:6a:27:26:62:1a:b4:92:99:80:ba:b7:5c:37:03:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:A2:71:2A:A3:54:4C:60:D9:8A:34:B8:2E:C9:57:6A:D6:CD:89
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:52:d7:5d:d3:2b:9a:10:fb:ca:85:22:d9:d2:b3:61:b9:
b6:ad:11:c9:ff:85:3e:cd:bc:b4:e4:2b:46:17:d4:1b:f0:8a:
08:a6:71:a5:f7:bf:04:a9:9a:60:ab:b7:f9:67:22:3f:ef:46:
fe:47:23:78:3a:8c:97:6c:2e:2a:43:16:bb:c1:2d:cb:cf:f1:
1a:17:eb:9f:5f:8c:6e:fc:44:00:87:93:da:d0:e3:ae:37:88:
e3:60:2f:a6:db:0d:da:5b:a5:2d:d9:d7:f3:bc:0d:09:dd:1c:
5b:61:65:a8:62:8f:07:0b:c2:fd:21:5a:91:7a:e0:7b:ec:6f:
25:42:a1:af:cf:b4:35:1a:0d:83:1c:cc:e4:76:28:ea:e8:dd:
ed:ab:18:2c:e8:9c:50:23:ca:06:7f:d5:ab:35:54:e4:a1:73:
b9:44:75:c9:85:f0:d6:1b:24:75:39:e8:6c:99:cc:f8:f9:10:
70:9d:a6:ad:c1:6d:2f:5c:94:cb:8f:8e:a4:11:74:a4:9d:40:
7b:d8:09:98:cb:8b:98:cc:b4:9d:45:b7:2f:35:18:7b:a9:90:
2e:27:09:f3:53:5e:1f:98:37:d7:76:8c:0a:ed:43:65:31:a3:
c3:a7:9d:a2:5c:89:fb:0b:a4:3f:00:97:d8:22:e4:e0:c7:fd:
a6:15:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:36 2026 by rpki-client